Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa
File:                     f285fce8-0e10-3435-bf49-9793aefeda4b.roa (raw, json)
Hash identifier:          AffkR+NgJdjXe+2jJVkj/x0n9S3NpnjRRs4g8DPHjnk=
Subject key identifier:   E0:24:AF:17:46:21:2F:09:53:C2:F0:94:E1:82:80:62:69:60:58:D9
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584D8EF581D37316AB26799F7914
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     7018
IP address blocks:        2620:a0:2003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:d3:73:16:ab:26:79:9f:79:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1895707a-63e9-4d47-94a6-246af9920a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:32:52:aa:8a:5b:e6:e0:a1:df:e8:e0:e2:
                    1b:22:da:08:6d:ec:d6:62:0b:71:c0:00:39:d9:bc:
                    df:8d:41:9c:37:2d:60:71:e3:d9:e6:33:24:91:5c:
                    4e:4b:0e:3e:20:00:3e:e4:a3:99:74:26:6d:bc:3d:
                    5a:b0:b2:54:ca:a6:20:ba:1e:1b:29:55:31:e4:e4:
                    28:57:24:87:da:a5:47:be:42:9c:25:d4:f1:74:59:
                    88:b9:d7:ba:7b:0e:f6:3f:2a:c4:07:a5:87:9b:da:
                    e7:2a:2c:18:6e:92:8b:a1:05:b4:e1:df:43:eb:7b:
                    3b:3c:dd:eb:e0:87:ee:71:16:48:5d:80:2f:6a:1c:
                    89:e9:3f:72:73:c9:b5:fa:f4:cc:60:c6:52:4c:14:
                    52:52:d2:aa:4b:41:cb:97:eb:e1:d5:5c:bc:37:b4:
                    ff:27:fa:e7:08:ab:fe:70:43:d5:17:bb:9f:b6:41:
                    b2:68:bb:eb:30:6e:64:0a:d6:cc:07:8e:bc:f5:fd:
                    b9:b3:41:94:04:73:44:77:90:47:86:3f:42:4a:46:
                    8d:f1:d9:6b:20:1a:cc:1a:ac:7d:39:f9:fd:b8:41:
                    d4:72:6a:64:38:f0:fa:ee:57:77:0e:9b:f8:c9:87:
                    4a:41:fa:fb:e0:03:c8:d0:e0:5a:b3:0c:fe:d2:4e:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:24:AF:17:46:21:2F:09:53:C2:F0:94:E1:82:80:62:69:60:58:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e8:a7:fe:e1:82:6a:4e:38:f9:59:06:89:b0:0b:75:c2:58:
         5b:1c:b9:85:62:03:b5:10:3d:38:d6:b4:4d:2c:5c:6d:5a:57:
         2b:95:46:9b:43:45:dd:5c:f4:f3:5d:21:ba:94:a8:f4:d8:00:
         97:48:b0:46:10:2c:74:6f:b4:9f:21:b4:e5:59:4b:53:e2:d3:
         c5:64:88:fb:f5:b5:1f:97:27:e7:e7:21:db:6a:49:83:b3:62:
         63:27:16:d8:b6:e7:d7:7a:7e:51:d5:da:54:4a:71:f9:91:f2:
         0f:d5:d4:c0:27:9d:2d:cf:b3:b7:96:14:6a:02:8b:b7:cf:6d:
         3b:f0:5e:5f:5a:d8:39:cd:c7:b3:71:a7:a6:e7:05:34:ab:3f:
         91:d0:03:91:a7:70:1e:00:02:93:14:ba:46:f4:c8:a1:ca:39:
         1e:7b:2d:f8:89:8e:fc:09:2f:b1:1e:a9:99:c4:49:97:40:ed:
         12:60:d3:b1:dd:e1:55:a6:57:70:f3:b0:eb:db:b1:ba:40:1c:
         3e:ad:46:8c:79:22:bc:99:05:ce:82:93:f7:e1:e5:a4:a1:57:
         e6:70:c9:83:ec:6b:1f:cd:e4:04:86:81:cb:29:f6:b5:b6:81:
         ab:94:16:dc:06:0c:02:c3:a0:91:43:06:f2:20:42:9d:43:a7:
         29:6c:fb:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9YHTcxarJnmfeRQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MTg5NTcwN2EtNjNlOS00ZDQ3LTk0YTYtMjQ2YWY5OTIwYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJEyUqqKW+bgod/o4OIbItoIbezWYgtxwAA5
2bzfjUGcNy1gcePZ5jMkkVxOSw4+IAA+5KOZdCZtvD1asLJUyqYguh4bKVUx5OQo
VySH2qVHvkKcJdTxdFmIude6ew72PyrEB6WHm9rnKiwYbpKLoQW04d9D63s7PN3r
4IfucRZIXYAvahyJ6T9yc8m1+vTMYMZSTBRSUtKqS0HLl+vh1Vy8N7T/J/rnCKv+
cEPVF7uftkGyaLvrMG5kCtbMB4689f25s0GUBHNEd5BHhj9CSkaN8dlrIBrMGqx9
Ofn9uEHUcmpkOPD67ld3Dpv4yYdKQfr74API0OBaswz+0k5/sQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOAkrxdGIS8JU8LwlOGCgGJpYFjZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvZjI4NWZjZTgtMGUxMC0z
NDM1LWJmNDktOTc5M2FlZmVkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADfop/7hgmpOOPlZBomwC3XCWFscuYViA7UQPTjWtE0sXG1aVyuV
RptDRd1c9PNdIbqUqPTYAJdIsEYQLHRvtJ8htOVZS1Pi08VkiPv1tR+XJ+fnIdtq
SYOzYmMnFti259d6flHV2lRKcfmR8g/V1MAnnS3Ps7eWFGoCi7fPbTvwXl9a2DnN
x7Nxp6bnBTSrP5HQA5GncB4AApMUukb0yKHKOR57LfiJjvwJL7EeqZnESZdA7RJg
07Hd4VWmV3DzsOvbsbpAHD6tRox5IryZBc6Ck/fh5aShV+ZwyYPsax/N5ASGgcsp
9rW2gauUFtwGDALDoJFDBvIgQp1Dpyls+7Y=
-----END CERTIFICATE-----
Generated at Wed May 13 05:20:53 2026 by rpki-client